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be al.owed.0 encrypt the dready encrypted ffle^ 

..^eprodnctanowsw.nsersto.ntdo.ntHeern.edded.crtpt^e 



h ^p—guser— nan, — mem without corporate or parents 
the web pages from processing u* 
nprmission and knowledge. 

ties.andi.sprivacyprotectic^Hssecurity.oo.s. 

• m en,s (Use of "automated configuration scnpf, or 
Modem, Cable, LAN), and all the ISP's recrements (Use 

.^tfiesofiwareofthepresent — ,s a security software comprises 
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exception to » but when passlng 

^eusefs—geSoftfilteringpassesapprovedanddtsappro 

•1 »w is sent to authorized recipients. 

— — — — 

Content filtering includes checking a c 

• r , Hard filtering against a friendly list passes or rqects the 
^endlyUstandexceptionhst. Hardliner, therequeste d document if it rejects 

r . u e S teddocumen,Softfi.termgagainstafrie„dlyl,stpassesthere q ueste 



^^^^^^^^^ 

:j op — — — — 

^parents or adn—* whenever the hs«s have been updated. 

IMPORTANT OBJECTS AND ADVANTAGES 

rnefoUo.i.s^onantohiea.andadvantageaofthepreaent—na.e: 

to 100% by preventing over-filtering; 

(3) toprovidea ^.a^^anene.don^on^evadeseave.oppe. 

that employ data mining programs or processes; 

(4) toprovid ea — that — — — 



« that is hard to obtain since it can be commumcated discretely orally; 

(^op.ovideasecuHtyandfi.tenn.softwatetbatcanbeusedbyatentoteotiocaiuset; 

highjackers, intruders and impersonators; 

^top.videasecutityandmtennssonwatetbatperfonnsbardandsonn.teting, 

pop-ups; 

(9)topr ovidea S ecu ri tyand fil tenn g so ft wa re t h atcanbe„sedtob 1 oc k spa m e- m a 1 , S ; 
( , 0) ,oprovideasecurity and fi ,terin g software that includes e-mail filtering; 

(11) t0 provideasecurity and filt e ri n g software tba, inciudes a privacy sbieid to protect 

sensitive information; 

(12) to pro.dea fi ,teri„ g and security software tba, bas a domain ftfterin, en g ine tbat can 
provide an optional e-mail alert system for bothbard and soft filtering 

(13 ) to provide a security and filtering software that can block spyware; 
O^oprovideasecurityandfilte^softwaretbatcanperformbotbcontentanddomatn 

filtering; 

(15)to provideasecurityandfifte ri n g soflwarewbereinits content filtering can replace a 

06)to provideasecurityandfi.terin g s 0 ftwaretbata,lowsau S er,oenbancesearcbin g 

(17)to provideasecuri,yandfilterin g softwaretbatcansupportun,i I mtednumbersof 
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supports 48 different account types during a single day, 

" (19) to provide a security and filtering software that inciudes an automated app.ication 
lau „cher that is also programmable by the parents or administrator, 

^toprovideasecurityandfiltering software that includes an automated,,, updater, 
(21) toprovideasecunty and filtering software that hasarange of access levels from 
maximum 100% access to full suspension, 

mode, 

act externally as a proxy server or as a chain of proxy servers, 

(2 4) toprovideasecurit y and filtering software whose administrative module can 
configure an automated configuration script file for accessing the Internet, 

(25) t oprovideasecurity and filtering software that includes e-mail filtering in wlnch 

inbox but be inaccessible, 

down access to the world wide web during certain hours, 

(27)topr ovideasecurit y and fihering software that is idea! for helping parents control 

their children's access to the world wide web, 



urfnendlyuserdomainlistsandisthereforemaintenanceftee, 

•, ndfilteringsofUvavewhereintheuserforfateringpurposescan 

(29) to provide a security and filtering sonwa 
usehisownprivate.ist.anetworHistorhybridoftherwo, 

(30) toprovideasecuri tyand fitog so ftw aret h atean b e U sedonaUtype S onnternet 

oonnectionssuehasDSL.modenr.cab.eandLANconneetions, 

ndfiheringsoftwarethatworkswithaUtypeaofwebbrowsers 

(3 1) to provide a secunty and filtering sonwa 

that are available on the market, and 

disapproved web sites or view disapproved contents. 

FIGIS howstheoveran software present hivention in the context oranetwork; 
nG2 showsthe fl owo f userre q ue S ts(inthedirectiono f nunrbers»V^o U g,.,») 

^^^^^^'^^ 

different user accounts at different times; 

FIG , A showseitherso ft fi.,e ri ngorhard fi ,te ri ngbytbedomainfi.tenngen P neo t the 

software of the present invention approving a request; 

nO^Bshowssoftfilteringbythedomainfilteiingen^nedisapprovingarequest 

including a mandatory e-mail alert; 



FK , 4 Cshowshardfi.«eringby the domain filtering engine disapproving a request; 

including optional e-mail alert; 

FIG. 4D shows hard filtering by the domain filtering engine disapproving a request; 
FIG SAshows hard filteringby the eontent fihering engine approving a request; 
FIG 5B shows hard filtering by the content filtering engine disapproving a request; 

Bll c*-.-^*•--■ ,4 • , * , ** , * ,,, * ,,, *■ 

optional replacement document; 

FIG.6Ashowsso ft filteringbythecontentfi.teringengineagainstu»friend.ylist 

approving a request; 

F!G6B shows soft filtering the eonten, filtering engine against unfiiendly lis, 
disapproving a request and passing a remainder to the user; 

request and highlights components found in the friendly list; 

FIG. 6D shows soft filtering by the content filtering engine against friendly hst 
disapproving a request and passes the entire document; 

FIG 7 A shows a local user with the software of the present invention; 

FIG 7B shows the software of the present invention used remotely by multiple users 

FIG. 8A is a flow diagram showing the application server acting externally 
proxy server; and 

FrGSBisaflowdiagramshowingtheapplicationserveractingextemallyinaproxy 
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be installed on a computer and be used by a remote user who obtains anonymity on a global 
US edby.oca.users only. The software 10 includes an administrative modu.e 20 and an 

domain filtering engine. 

SoftwarelOincludes an admrnistrative module 20 thatauser interacts with for creating 
.eraccountsandconfi^ngthoseuser accounts, and for configuring automated service, The 
administrate module20 accepts user inputs for configuration settings for inbound 

inCdelist edifing, list deleting, searchmg of hsts, saving of Usts, proxy chaining routing, addmg 
and deleting users, interchanging lists and importing and exporting lists. 
It is noted that any list mentioned herein can be empty. 

Misused to conftgurearangeofuseraccesslevelsandcancreatethreetypesofuser accounts 
th a th aveuni q ueuser names and passwords for each user account including 0) an administrator 
accounts is self-configuring and that controls automated services and selects for each account 
bardfilteringor soft filtering, 

automate, servicesand (3, regular accounts without admimstrative privileges. In addition module 
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, ;f a user's unfriendly list is empty, there is no 
witha^erangeoflimitations. For example, if a user sunfri 

Umitationonaccesstoanydomainontheworldwideweb. 
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user account. 



sit es requested byauser and capable of performing domain filtering. 

^^^^^^^^^^ 
^ ta t ta ^^^ fc - ta -'*-*- , '" ,,h,,,-,, 

tfietenninated^-onttfi 

^^-.^^^-- fc *-- ,,,,,,,,, ^ 40 ' ,- 7 t 

^ng.fienu^oven.ledW-o^de.cepfionfiato.dotna, — e^onbst 

disapproved request after a certain amount of time. 

q.edomainfilteringenginealsofiasanoptionale-mailalertcomponentor.stemforfiard 

— *■^^ , ~* ,d,, ' 
^ationandtheusernameThee-maiUiertsystemthencieansitsqueue. 

with respectto doming, inbound communications are arranged so that anactua, 
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fundus, **~~~"^«~~'~*** m "-~ 
Content filtering engine 50 is oapab, of p e «co„te„ t filtering which indudes 

cHee.ngacontentof.^esteddoe^entagai.tafriendly content inbound lis,, a, unfriendly 

^ueiyconfiguredbyeachuse, On,y one of the friendly content inbound lis, and the ururiendly 

content inbound list is active at any given time. 

Itshould be noted that for each engine, na-nely the domain filtering engine40and the 

Th e term «re q ues,ed document" as used herein refers to a web page (for examp.e in HTML or 
XM.fo^onthewor.dwidewebthatauserseehsto accessor documents downloaded fiom 



a web link. 



either passes the rented document if the content of the rented document ,s not on the 

requ es,eddocumentiftheconten, of ther^ested document is on theunfiiendhy content inbound 
list For hard filtering against the friendly content inbound list the content filtering engine 50 
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, • „„ the friendly content inbound list or rejects the requested 
onherequesteddocuntentrsonthe^endly ^^^V, 
docum entif.hecontentofthere q ue S .eddocun 1 ent 1 snotont h ernend y 

do cument t^sbeenrejected-arep— t document selected, a user o fth e 



.O.^nstbeconten.onberequesteddocuntenta.ainsttbeuru.endlv 

„t of the requested document and passes the 
unfriendly content inbound list or.if the content is 

,erruled by the content exception list, rejects 
remainder of the requested document. For 
content filtering engine 50 either, unless 



^teddo^enttfthecontentisnotonthe 



„„ the unfriendly content inbound list then, unless 
me content of the requested document and passes 



soft filtering against 



the friendly content inbound list the 



overruled by the 



co„te„te X ception,ist,passe S tbem,,requesteddocument lf thecontentisnoton 
K arstorpassesthefullrequesteddocumentandhighlightsthecontent 
the friendly content inbound hst or passes 

• , oft filtering in which an incoming disapproved e-madremams 
includes an option for soft filtenng 



and wi «h the content filtering engine 50. Application server 30 also acts externally as a proxy 
server that receives requests from HTTP clients, forwards the requests to servers, receives a 

server 30, instead of acting externally as a proxy server, acts externally in the context of a 
deployment of a chain of proxy servers (multiple instances of the software are sequentially 
interconnected). The chain of proxy servers include at leas, a firs, proxy server that reives 
requests from HTTP clients and forwards the requests through a zero or more intermediary proxy 
servers to a last proxy server, the last proxy server forwarding the requests to servers, and 
wherein.he las, proxy server receives a server response and forwards the server response through 
the zero or more intermediary proxy servers hack to the firs, proxy server, which firs, proxy 
server forwards the server response to HTTP clients. As shown in FIG. 8B the series of dots 
under the phrase "Client request" in the middle of the FIG. 8B means that between zero and "N" 
intermediate proxy servers may exist between the firs, and the last proxy servers. One of the 



server. 



Domain filtering engine 40 and content filtering engineSO each aiso have a privacy shield. 
Domain filtering engine 40 has an outbound privacy shield for b.ocking disapproved character 
strings representing confidential information. The administrative user, parent or corporation 
determinesthe information that is critical to the business or fanrily and should no, be disclosed on- 
fa An example is a socia! securi,y, da,e of birth, address, family names, e,e The content 
filtering engine's 50 inbound privacy shield component blocks scripting language functions for 
particular user accounts. 
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activateapo , upwin dow — te 

decides which user account to activate. 

— — — — 

ofu.erdomainffienngvolations.asdiscussedprevious.y)^ 

filtering, on the other hand can be turned off. 
^e^e. — anedhot. 

^enc.pfion — that genetatea one or m ote secret ^etrie ene^on „ , 
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against intrusion attack, 
ignores that small portion. 
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spirit and scope of the following claims. 
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